Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143080.roa
File:                     AS143080.roa (raw, json)
Hash identifier:          M7QgeCxmg++UKyd8jsWCuCKD9Uy+BY8VZktsRRIkUq8=
Subject key identifier:   FD:4E:C3:34:83:85:7B:8C:2D:62:CA:E2:7D:F4:F5:CA:11:47:8A:46
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1C7E47CF73A8BF49FC49DE73E3446C73A790A916
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143080.roa
Signing time:             Fri 22 May 2026 04:26:52 +0000
ROA not before:           Fri 22 May 2026 04:21:52 +0000
ROA not after:            Fri 21 May 2027 04:26:52 +0000
asID:                     143080
IP address blocks:        240a:a1ae::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7e:47:cf:73:a8:bf:49:fc:49:de:73:e3:44:6c:73:a7:90:a9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:52 2026 GMT
            Not After : May 21 04:26:52 2027 GMT
        Subject: CN=FD4EC33483857B8C2D62CAE27DF4F5CA11478A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:e9:57:54:52:6c:8a:ee:a1:2a:27:0b:22:
                    96:5f:88:70:9d:a5:4b:95:e5:b4:7d:8f:f6:33:4a:
                    54:d2:d7:8c:46:e2:68:78:e8:d2:94:cf:7d:95:97:
                    60:c0:d7:47:de:f0:fb:52:a0:b1:76:e7:45:99:e5:
                    75:9d:4f:57:cc:77:c2:12:24:a2:61:0c:f1:83:54:
                    25:68:81:44:c1:3c:aa:39:6a:c4:5a:40:18:0d:fb:
                    cf:8d:2b:25:79:86:26:28:77:13:f7:b3:3a:d1:83:
                    42:68:03:e6:34:d7:62:94:7d:d9:71:7b:55:c9:8d:
                    ea:30:a5:6c:96:6a:4f:15:d4:fa:b8:29:a2:48:5f:
                    ef:f2:09:3c:31:7b:db:9c:99:7b:13:8c:c2:ae:2a:
                    12:57:19:12:d7:7e:29:5b:42:9d:8b:de:02:fc:db:
                    ba:25:3f:10:15:77:bb:99:c6:71:eb:19:8b:97:f3:
                    a1:b4:f0:e7:62:7f:4d:ad:44:60:92:07:1c:f9:e1:
                    d3:1c:22:7d:48:42:ce:53:0f:71:18:4f:f0:97:e3:
                    45:05:00:bf:11:69:a3:ed:82:e2:2f:de:46:92:c0:
                    2f:c4:31:87:96:ea:b4:6b:78:27:4c:a1:e5:89:99:
                    94:7d:c3:0c:fc:b6:1d:1c:7b:6c:1e:26:4e:50:79:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4E:C3:34:83:85:7B:8C:2D:62:CA:E2:7D:F4:F5:CA:11:47:8A:46
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143080.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1ae::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:06:d5:5a:74:2a:97:74:58:4e:d2:53:60:8a:ae:e2:3f:23:
         78:0e:c6:36:00:c6:c5:6a:66:4e:bf:8c:95:3f:4f:c3:3f:94:
         be:78:2f:cd:2c:ff:da:13:e6:ed:f0:df:1b:34:3b:78:b9:a3:
         4a:50:6a:bb:cf:11:7c:0f:25:da:36:0e:ec:5e:c2:79:6d:6a:
         74:7c:cc:b7:84:fc:dd:7c:99:ce:56:bd:f0:92:d2:97:60:ab:
         3c:a1:d7:bf:25:ae:ef:64:68:0b:63:5e:7e:3e:f1:96:3c:14:
         3d:47:01:ac:98:c6:4f:30:49:79:19:7e:a5:eb:be:01:ce:24:
         72:76:46:c0:00:c9:0d:fe:00:73:4f:81:fd:39:7b:26:2f:19:
         2d:8b:a4:51:ba:0c:f1:a1:81:69:82:5a:03:66:5b:10:eb:96:
         b2:28:f4:50:f9:23:14:dd:4f:b7:a2:88:83:ce:95:41:74:54:
         f8:d9:f6:7d:49:6f:c0:da:ea:b7:dd:00:5d:63:15:16:c2:1f:
         2a:07:82:61:2e:fe:bf:da:29:e7:60:4e:68:bd:46:c7:2e:4a:
         74:9c:26:89:b2:9d:d4:b1:7f:f8:09:f8:5b:05:43:75:de:26:
         98:93:a5:c8:71:f4:15:8b:b6:fd:0f:c8:43:c9:56:06:85:2e:
         d5:57:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----